This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
File:                     3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft (raw, json)
Hash identifier:          fcg/QojAa2UuR/h+oMAZwZVpSIC3TkAQ/UxgUfdatPU=
Subject key identifier:   7A:1D:31:5D:2B:95:2F:59:A6:C9:75:76:10:FC:00:79:E0:80:0A:78
Authority key identifier: 3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05
Certificate issuer:       /CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
Certificate serial:       23346DF8A9772BED6E8211AA7C3292D2B6CFF580
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
Manifest number:          034B
Signing time:             Mon 22 Dec 2025 21:38:46 +0000
Manifest this update:     Mon 22 Dec 2025 21:33:46 +0000
Manifest next update:     Tue 23 Dec 2025 21:54:46 +0000
Files and hashes:         1: 34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa (hash: 334eFyhe5qHaD8UdK0Gjl0ftTL+be+I51bBwMtBerMU=)
                          2: 3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl (hash: rdO46vtsJ+SoV6YJuH6MtGwxYRnubArsM798+zLg+AI=)
                          3: 323830343a363866383a3a2f33322d3438203d3e20323730323430.roa (hash: Zf5J1vo0exwtyULcPbQWl9oqPv7UiP9VJcKCX094QC8=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl
                          rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 23 Dec 2025 21:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:34:6d:f8:a9:77:2b:ed:6e:82:11:aa:7c:32:92:d2:b6:cf:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DBEC771F5B3B1E1950934623AEEC5519CE71A05
        Validity
            Not Before: Dec 22 21:33:46 2025 GMT
            Not After : Dec 23 21:54:46 2025 GMT
        Subject: CN=7A1D315D2B952F59A6C9757610FC0079E0800A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7d:31:9d:bc:b5:48:29:68:e4:26:14:2e:c4:
                    e9:eb:87:84:e7:d7:2a:de:45:43:23:d2:e5:fd:ab:
                    a6:bc:c1:fe:39:63:af:cf:3c:29:3f:c6:18:55:09:
                    7e:d8:42:09:44:0a:e5:c2:ad:62:e6:46:23:f8:dd:
                    20:d8:77:fb:df:61:03:c5:8e:7f:ba:3e:9e:31:46:
                    92:32:40:d9:29:ce:9b:7d:59:bb:5e:78:3d:c7:0e:
                    f1:83:36:a7:4f:e8:a5:0a:75:dc:19:99:00:ad:b3:
                    30:44:4d:d3:e2:8f:b8:38:8c:3a:a5:f1:9f:38:57:
                    7d:81:d0:09:93:49:c8:5d:53:57:7e:2d:8f:e3:ff:
                    1f:32:4f:94:62:5e:f8:9d:c9:e4:cb:60:00:a7:0a:
                    e8:c0:a6:8d:21:17:fc:34:45:fc:3c:f1:26:26:09:
                    ec:c3:26:16:61:67:b9:f8:54:18:05:f5:b5:31:65:
                    4b:2d:dc:19:41:a8:ce:f3:ab:61:d0:8b:ad:ba:26:
                    36:6e:72:20:83:5f:4f:02:6c:a1:d8:43:c1:6d:00:
                    a7:92:30:2f:7b:68:f7:2e:5d:c9:20:a0:b5:c0:46:
                    95:48:e7:26:29:94:3d:5a:60:ca:fc:e3:54:9b:f6:
                    8d:43:1e:8d:e4:c6:1c:fd:dc:16:3f:26:eb:0c:9f:
                    4d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1D:31:5D:2B:95:2F:59:A6:C9:75:76:10:FC:00:79:E0:80:0A:78
            X509v3 Authority Key Identifier:
                keyid:3D:BE:C7:71:F5:B3:B1:E1:95:09:34:62:3A:EE:C5:51:9C:E7:1A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/1/3DBEC771F5B3B1E1950934623AEEC5519CE71A05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0b:a0:53:3c:55:bb:49:de:63:86:b7:54:ae:b0:d0:fe:a7:
         fb:57:2c:43:e8:bb:a4:48:6d:4b:eb:05:f1:d8:39:59:33:11:
         50:86:7e:bb:df:88:9b:4e:d2:da:9e:bb:45:76:c2:1d:ca:13:
         35:a8:43:be:d0:e4:9d:9b:ea:98:59:a1:2f:ce:ab:7a:c9:08:
         43:37:8a:69:95:30:69:b8:d0:34:db:4c:f9:64:c0:77:6e:a7:
         9d:0a:85:f3:75:3e:67:eb:96:c9:c2:d2:e3:75:4b:e6:e0:ea:
         b3:1a:1f:68:da:f7:65:b8:14:f7:0c:d7:1d:61:fc:4a:37:ec:
         48:45:4e:b8:6e:d8:c2:66:a5:0a:1e:e2:52:0b:24:b7:bd:36:
         2a:fd:90:03:5d:bd:6c:32:d4:47:93:d4:87:43:e1:b6:9e:b7:
         a2:a2:e7:44:14:df:27:ec:e1:28:70:43:ef:6e:57:34:c4:c8:
         ce:db:10:e4:80:2b:1c:b0:6a:d0:04:60:18:4b:5a:48:95:8a:
         db:00:83:35:cf:9e:0b:06:c5:18:c6:76:9b:7b:34:a3:8a:b2:
         07:74:a7:97:6c:b9:6e:21:36:3f:7c:7c:51:69:c0:cc:47:0e:
         b2:aa:0d:42:33:69:16:7b:8d:40:0b:a5:24:bd:10:b0:a6:ff:
         ef:37:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:58:27 2025 by rpki-client